Overview

overview

10

Static

static

databaseView.jpg.dll

windows7_x64

10

databaseView.jpg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    databaseView.jpg

  • Size

    226KB

  • Sample

    210505-dmampx1ppn

  • MD5

    4663d5c264c2a2ab8711e10cdeb9c138

  • SHA1

    1e08012e2fb7a5f9237c9f21ae19b9b5a0cd979d

  • SHA256

    666a39015d53540460f6f3b5347d22457dfefd8ace09048503e7c20bb4ecd2f4

  • SHA512

    57827fb9bef53d71c50756b4180970420dfa371bfc5bd69f20ed20d643aa5d234f04c2ec822a9b2f4798fbc00ab573eacc7aa112e2c1b57c3cdb77aa8b2a365c

Score
10/10
icedid1386562008bankertrojan

Malware Config

Extracted

Family

icedid

Campaign

1386562008

C2

zasertiokil.top

Targets

    • Target

      databaseView.jpg

    • Size

      226KB

    • MD5

      4663d5c264c2a2ab8711e10cdeb9c138

    • SHA1

      1e08012e2fb7a5f9237c9f21ae19b9b5a0cd979d

    • SHA256

      666a39015d53540460f6f3b5347d22457dfefd8ace09048503e7c20bb4ecd2f4

    • SHA512

      57827fb9bef53d71c50756b4180970420dfa371bfc5bd69f20ed20d643aa5d234f04c2ec822a9b2f4798fbc00ab573eacc7aa112e2c1b57c3cdb77aa8b2a365c

    Score
    10/10
    icedid1386562008bankertrojan

    • IcedID, BokBot

      IcedID is a banking trojan capable of stealing credentials.

      trojanbankericedid
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks